Overview

URL remoshomongtrading.com/
IP185.107.56.60
ASNNForce Entertainment B.V.
Location Netherlands
Report completed2022-07-03 07:07:17 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-07-03 2 remoshomongtrading.com Sinkholed
2022-07-03 2 remoshomongtrading.com Sinkholed
2022-07-03 2 remoshomongtrading.com Sinkholed


Files

No files detected



Passive DNS (44)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] iqoption.co.th (1) 138008 2017-04-11 15:51:44 UTC 2019-08-16 00:13:01 UTC 185.117.134.136
[Mnemonic Passive DNS] region1.google-analytics.com (1) 0 No data No data 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
[Mnemonic Passive DNS] www.clarity.ms (1) 1404 2018-11-27 11:04:59 UTC 2022-07-03 04:52:29 UTC 40.90.65.7
[Mnemonic Passive DNS] iqtrading.asia (1) 112830 No data No data 185.117.134.136
[Mnemonic Passive DNS] www.google.no (1) 25607 2012-05-21 14:04:11 UTC 2014-08-11 22:10:14 UTC 142.250.74.3
[Mnemonic Passive DNS] remoshomongtrading.com (3) 0 No data No data 185.107.56.60 Unknown ranking
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-02 06:56:22 UTC 54.187.71.185
[Mnemonic Passive DNS] eu.iqoption.com (1) 140024 2020-11-23 18:58:45 UTC 2022-01-22 16:49:36 UTC 185.117.134.138
[Mnemonic Passive DNS] r3.o.lencr.org (11) 344 2020-12-02 08:52:13 UTC 2022-07-02 05:03:49 UTC 23.36.77.32
[Mnemonic Passive DNS] animikii-ana.com (3) 0 No data No data 52.73.1.119 Unknown ranking
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-07-03 04:06:00 UTC 34.120.237.76
[Mnemonic Passive DNS] iq-options.com (1) 138692 No data No data 185.117.134.136
[Mnemonic Passive DNS] banking.trading (1) 139482 2020-12-06 05:02:13 UTC 2021-05-16 05:29:01 UTC 185.117.134.136
[Mnemonic Passive DNS] iq-option.com (1) 111554 2020-08-13 09:00:18 UTC 2022-06-13 16:50:31 UTC 185.117.134.136
[Mnemonic Passive DNS] broker-iqoption.com (1) 139163 No data No data 185.117.134.136
[Mnemonic Passive DNS] stats.g.doubleclick.net (1) 96 2017-01-30 04:59:59 UTC 2022-07-03 04:33:25 UTC 173.194.222.155
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-02 05:33:42 UTC 54.230.111.64
[Mnemonic Passive DNS] deffield-funuals.com (1) 672847 No data No data 18.192.108.151
[Mnemonic Passive DNS] c.clarity.ms (2) 803 2021-02-03 23:22:47 UTC 2022-07-03 04:52:30 UTC 20.234.93.27
[Mnemonic Passive DNS] mc.yandex.ru (3) 2672 2017-01-29 05:34:36 UTC 2022-07-03 02:38:35 UTC 93.158.134.119
[Mnemonic Passive DNS] api.popin.cc (5) 20906 2012-06-19 10:21:37 UTC 2021-05-10 09:43:07 UTC 119.63.193.220
[Mnemonic Passive DNS] ocsp.sca1b.amazontrust.com (1) 1015 No data No data 54.230.245.100
[Mnemonic Passive DNS] www.googletagmanager.com (1) 75 2017-01-30 05:00:47 UTC 2022-07-02 04:59:18 UTC 142.250.74.72
[Mnemonic Passive DNS] websdk.appsflyer.com (1) 7394 2019-06-11 19:06:57 UTC 2022-07-03 05:42:17 UTC 23.36.76.88
[Mnemonic Passive DNS] bat.bing.com (3) 387 2017-01-30 04:52:25 UTC 2022-07-02 06:32:09 UTC 13.107.21.200
[Mnemonic Passive DNS] www.facebook.com (1) 99 2012-05-28 23:09:18 UTC 2022-07-02 04:56:50 UTC 157.240.240.35
[Mnemonic Passive DNS] affiliate.iqbroker.com (1) 84217 2021-11-16 16:06:07 UTC 2022-06-30 14:30:21 UTC 45.60.156.148
[Mnemonic Passive DNS] ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-07-03 04:43:22 UTC 142.250.74.3
[Mnemonic Passive DNS] tracker.affiliate.iqbroker.com (1) 169671 No data No data 185.117.134.136
[Mnemonic Passive DNS] iqoptions.co (1) 140120 No data No data 185.117.134.136
[Mnemonic Passive DNS] a.mgid.com (1) 18073 2013-11-17 05:08:48 UTC 2019-03-26 13:27:55 UTC 104.19.134.78
[Mnemonic Passive DNS] static.cdnroute.io (28) 77909 2021-06-22 14:28:49 UTC 2022-07-02 02:06:05 UTC 23.36.76.88
[Mnemonic Passive DNS] iqbroker.co (1) 105199 No data No data 185.117.134.138
[Mnemonic Passive DNS] iqoption.com (2) 27637 2019-07-31 10:38:37 UTC 2022-06-13 16:50:31 UTC 185.117.134.136
[Mnemonic Passive DNS] ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-07-03 04:16:36 UTC 104.18.21.226
[Mnemonic Passive DNS] ocsp.digicert.cn (2) 37572 2020-03-20 17:45:56 UTC 2022-07-03 04:17:04 UTC 47.246.44.205
[Mnemonic Passive DNS] c.bing.com (1) 247 2017-01-30 05:00:11 UTC 2022-07-03 04:51:44 UTC 13.107.21.200
[Mnemonic Passive DNS] iqbroker.com (2) 30997 2013-05-04 07:01:31 UTC 2017-02-17 06:27:16 UTC 185.117.134.138
[Mnemonic Passive DNS] www.google.com (1) 7 2012-05-22 04:23:54 UTC 2022-07-03 03:15:57 UTC 142.250.74.164
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.7
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] b.clarity.ms (2) 3462 2021-07-27 12:49:08 UTC 2022-07-03 04:09:57 UTC 20.75.32.255
[Mnemonic Passive DNS] ocsp.digicert.com (7) 86 2012-11-29 12:49:49 UTC 2022-07-03 04:05:41 UTC 93.184.220.29
[Mnemonic Passive DNS] www.google-analytics.com (1) 40 2017-01-30 05:00:06 UTC 2022-07-03 04:57:01 UTC 142.250.74.174


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 185.107.56.60

Date UQ / IDS / BL URL IP
2022-08-11 20:02:51 +0000
0 - 0 - 1 rp.thecoolzipextractorapp.com/?pcrc=1483404113 185.107.56.60
2022-08-11 11:49:53 +0000
0 - 0 - 3 know.wrengostic.com/ 185.107.56.60
2022-08-11 02:24:19 +0000
0 - 0 - 3 qanal.net/ 185.107.56.60
2022-08-08 23:15:28 +0000
3 - 0 - 0 code.hammerhandz.com/ 185.107.56.60
2022-08-07 01:54:41 +0000
0 - 0 - 4 www.robbiesoccertournament.com/ 185.107.56.60
2022-08-05 01:00:34 +0000
0 - 0 - 4 uk.hammerhandz.com/ 185.107.56.60
2022-08-02 04:49:09 +0000
0 - 0 - 1 booshare.net/ 185.107.56.60
2022-08-02 03:14:47 +0000
0 - 0 - 5 carreraatusalud.com/index.php/salud-tips/item (...) 185.107.56.60
2022-08-01 09:38:43 +0000
0 - 0 - 1 getcraft.net/ 185.107.56.60
2022-08-01 08:49:24 +0000
0 - 0 - 5 lsquaretarlac.com/images/image.gif?59823=1099881 185.107.56.60

Last 10 reports on ASN: NForce Entertainment B.V.

Date UQ / IDS / BL URL IP
2022-08-11 22:49:26 +0000
0 - 0 - 1 141.98.6.236/limetor/ZvfejoxpnLIMETORRENTS-1.exe 141.98.6.236
2022-08-11 22:48:36 +0000
0 - 0 - 1 141.98.6.236/newz2k/ZvfejoxpnZ2K-1.exe 141.98.6.236
2022-08-11 22:48:30 +0000
0 - 0 - 1 141.98.6.236/update/ZvfejoxpnTPB-1.exe 141.98.6.236
2022-08-11 22:48:24 +0000
0 - 0 - 1 141.98.6.236/Z2KNEW/ZvfejoxpnZ2K-1.exe 141.98.6.236
2022-08-11 22:48:17 +0000
0 - 0 - 1 141.98.6.236/1337New/ZvfejoxpnTORRENTOLD-1.exe 141.98.6.236
2022-08-11 22:48:11 +0000
0 - 0 - 1 141.98.6.236/1337Traget/Zvfejoxpn1337X-1.exe 141.98.6.236
2022-08-11 22:48:05 +0000
0 - 0 - 1 141.98.6.236/utorrent/ZvfejoxpnTPB-1.exe 141.98.6.236
2022-08-11 22:47:59 +0000
0 - 0 - 1 141.98.6.236/1337/zvfejoxpntorrentold-1.exe 141.98.6.236
2022-08-11 22:47:53 +0000
0 - 0 - 1 141.98.6.236/z2k/zvfejoxpnz2k-1.exe 141.98.6.236
2022-08-11 22:47:51 +0000
0 - 0 - 1 141.98.6.236/FreeApps/ZvfejoxpnFREEAPPS-1.exe 141.98.6.236

No other reports on domain: remoshomongtrading.com



JavaScript

Executed Scripts (39)


Executed Evals (8)

#1 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 512e2601d237c9ed3bc53aa924408d71d6fbe662652b1f08cbcf033d80721b7b

                                        (function() {
    if (google_tag_manager["GTM-WN69JL"].macro(2)) {
        var b = google_tag_manager["GTM-WN69JL"].macro(3),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#2 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 1e9feb5c0b74e0384d390d5e88fffbb9340d8f4f3bc79c5113e636899efa1eba

                                        (function() {
    if (google_tag_manager["GTM-WN69JL"].macro(8)) {
        var b = google_tag_manager["GTM-WN69JL"].macro(9),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#3 JavaScript::Eval (size: 225, repeated: 1) - SHA256: 0f198042c5229c82c7b9fed16ae0912ade0dba430c1b4fd6c42941c848d3d37f

                                        (function() {
    if (google_tag_manager["GTM-WVT65V5"].macro(25)) {
        var b = google_tag_manager["GTM-WVT65V5"].macro(26),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#4 JavaScript::Eval (size: 225, repeated: 1) - SHA256: f723d432f697b9a3451348044f45487b1973c76dec3beb5a893f1822d0fcd625

                                        (function() {
    if (google_tag_manager["GTM-WVT65V5"].macro(27)) {
        var b = google_tag_manager["GTM-WVT65V5"].macro(28),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#5 JavaScript::Eval (size: 221, repeated: 1) - SHA256: cfdfef51845ee08469e1e564f2862c2a2b7ee4982898f91cc31e07ce2f5fd01c

                                        (function() {
    if (google_tag_manager["GTM-WN69JL"].macro(4)) {
        var b = google_tag_manager["GTM-WN69JL"].macro(5),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#6 JavaScript::Eval (size: 221, repeated: 1) - SHA256: 762ec4503d5524d7d22233e6966ad3ca5bdb9bc22f39b92417bbe9b28b74a755

                                        (function() {
    if (google_tag_manager["GTM-WN69JL"].macro(6)) {
        var b = google_tag_manager["GTM-WN69JL"].macro(7),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#7 JavaScript::Eval (size: 225, repeated: 1) - SHA256: 19c8decf747250623382fce3507e93a5eaf168c0077657ca0c62eef6004d0c03

                                        (function() {
    if (google_tag_manager["GTM-WVT65V5"].macro(23)) {
        var b = google_tag_manager["GTM-WVT65V5"].macro(24),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

#8 JavaScript::Eval (size: 225, repeated: 1) - SHA256: 2350b8abc001b0faa87b1de6c37d71e3f05db361cb9d2694aa0a07e02ae47581

                                        (function() {
    if (google_tag_manager["GTM-WVT65V5"].macro(29)) {
        var b = google_tag_manager["GTM-WVT65V5"].macro(30),
            a = b.indexOf("afftrack\x3d");
        if (-1 < a) {
            a += 9;
            var c = b.indexOf("__", a);
            return -1 < c ? b.substr(a, c - a) : null
        }
    }
    return null
})();
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 13, repeated: 1) - SHA256: 0c62c11e910d7c0d6b6c9800b70e78bfd9220e1f78bd7bb34ae4c3646d05f6e5

                                        < body > < /body>
                                    


HTTP Transactions (116)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 03 Jul 2022 06:51:55 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qUGSZh6hy9uxsQQdJP-2TkM3E-5RS2nBgQvGtrwYFzAV89KUR1AEfQ==
Age: 908


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8E263E6763753F5659AC0FC2D11DAF8ECE9720988153C38CB40631AF26C86575"
Last-Modified: Fri, 01 Jul 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4276
Expires: Sun, 03 Jul 2022 08:18:19 GMT
Date: Sun, 03 Jul 2022 07:07:03 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Jul 2022 03:26:42 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Wepp5hJ-Iy7eAk5a6-w-5m7iCCtodFia2z3pUXCi4W_t2t9hfoidPw==
age: 13222
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            GET / HTTP/1.1 
Host: remoshomongtrading.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         185.107.56.60
HTTP/1.1 200 OK
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 478
content-type: text/html; charset=utf-8
date: Sun, 03 Jul 2022 07:07:03 GMT
server: nginx
set-cookie: sid=bde3fc0c-fa9e-11ec-ac03-2a524dd1edb1; path=/; domain=.remoshomongtrading.com; expires=Fri, 21 Jul 2090 10:21:10 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (478), with no line terminators
Size:   478
Md5:    b69b5f3323ceff37b07b2df3cbea66d7
Sha1:   7cabf76d69acf48ddcc2310a0359f85b6324f077
Sha256: 361185fabda1e6172bc813cad510321e093845acd444b42a20c1a700541fa071

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: remoshomongtrading.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://remoshomongtrading.com/
Cookie: sid=bde3fc0c-fa9e-11ec-ac03-2a524dd1edb1

                                         
                                         185.107.56.60
HTTP/1.1 404 Not Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 03 Jul 2022 07:07:04 GMT
server: nginx


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   9
Md5:    d8f4a1993546cc4b850cde3599e27aec
Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067
Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 03 Jul 2022 06:52:21 GMT
Cache-Control: max-age=3600
Expires: Sun, 03 Jul 2022 06:52:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LDhDEXGdWeH7Jbl83DHRz0an3WqtuzCkUxQFYnOk_AcAtfmEW4h5sw==
Age: 884


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY1NjgzOTIyMywiaWF0IjoxNjU2ODMyMDIzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIycnYzdnNrZ2Y2c3N2MHFvNTgyM3Bic3AiLCJuYmYiOjE2NTY4MzIwMjMsInRzIjoxNjU2ODMyMDIzOTU3Mzc5fQ.jeCwDC8xRtzIdXwqgxnVB3JsWXopbyxE-3JDF2VMi-4&sid=bde3fc0c-fa9e-11ec-ac03-2a524dd1edb1 HTTP/1.1 
Host: remoshomongtrading.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://remoshomongtrading.com/
Cookie: sid=bde3fc0c-fa9e-11ec-ac03-2a524dd1edb1
Upgrade-Insecure-Requests: 1

                                         
                                         185.107.56.60
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 03 Jul 2022 07:07:04 GMT
location: http://animikii-ana.com/zcvisitor/be1b4e08-fa9e-11ec-aefd-12c6075c01eb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889
server: nginx
set-cookie: sid=bde3fc0c-fa9e-11ec-ac03-2a524dd1edb1; path=/; domain=.remoshomongtrading.com; expires=Fri, 21 Jul 2090 10:21:11 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3342
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:05 GMT
Last-Modified: Sun, 03 Jul 2022 06:11:23 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /zcvisitor/be1b4e08-fa9e-11ec-aefd-12c6075c01eb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889 HTTP/1.1 
Host: animikii-ana.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://remoshomongtrading.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         52.73.1.119
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Sun, 03 Jul 2022 07:07:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: qXsLYupG


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1002
Md5:    a46f97c88eada57ae43289be63cd39b0
Sha1:   a22f0ee6e2cc6349881b864aa3bf0e43feff055a
Sha256: f2be1d95becc35bc4661e8b3f1e1f8bf3fe727c5f2ea71fe13dae14cd378b46d
                                        
                                            GET /zcredirect?visitid=be1b4e08-fa9e-11ec-aefd-12c6075c01eb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false HTTP/1.1 
Host: animikii-ana.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://animikii-ana.com/zcvisitor/be1b4e08-fa9e-11ec-aefd-12c6075c01eb/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=1e3ae610-2049-11eb-8aeb-0afaf647e889
Upgrade-Insecure-Requests: 1

                                         
                                         52.73.1.119
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Sun, 03 Jul 2022 07:07:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: bdQEnopr


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (372)
Size:   830
Md5:    ab2d1a5e472eea2e3f0b3c10dad05843
Sha1:   b79276dc212a711141b3fb8898537fbf5ebd7a5d
Sha256: db95bfd0dce7bcc601ca18a7274610ad50a5a4171b1046f2569f4d90756a8bc8
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cymcjyWdPxakPwNLcqpOwQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.187.71.185
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fv8aLtA/Eir7Jp+j6jUuM23KjBA=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: animikii-ana.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://animikii-ana.com/zcredirect?visitid=be1b4e08-fa9e-11ec-aefd-12c6075c01eb&type=js&browserWidth=1280&browserHeight=1024&iframeDetected=false

                                         
                                         52.73.1.119
HTTP/1.1 404
Content-Type: text/html;charset=utf-8
                                        
Date: Sun, 03 Jul 2022 07:07:05 GMT
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: GqlqsXMN


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Size:   653
Md5:    ba2732b1b2fa2626ffaa15f62f9e7d66
Sha1:   203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
Sha256: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:05 GMT
Etag: "62c034ec-1d7"
Server: ECS (dcb/7EEE)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mqLUxOONoMN0_fbysU0p42Jihs0uNH_E-m4UQFaMj5IOAJZXcwaqfQ==

                                        
                                            GET /redirect?target=BASE64aHR0cHM6Ly9hZmZpbGlhdGUuaXFicm9rZXIuY29tL3JlZGlyLz9hZmY9MTA1NSZpbnN0cnVtZW50PWZvcmV4JmFmZnRyYWNrPXdzMWJ2a3UycjNvbG9uYWhpYW1mcHRlMCZjbGlja2lkPXdzMWJ2a3UycjNvbG9uYWhpYW1mcHRlMA&ts=1656832025583&hash=FerjC8aUOF_Hw7LohfRA5oVbUbOmK0ZUnxqH4tOsNJg&rm=DJ HTTP/1.1 
Host: deffield-funuals.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1yyhe.trackvoluum.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         18.192.108.151
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:05 GMT
content-type: text/html;charset=UTF-8
content-length: 552
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (552), with no line terminators
Size:   552
Md5:    668d5b56216f5c85052e39453f04fd66
Sha1:   1b42fb8fc95711f3d89cc3345221d81185b28f3f
Sha256: ac72113794f00e4ab3d07db2a93b027ecc52de9c518c659aea60c83b6ac75268
                                        
                                            GET /redir/?aff=1055&instrument=forex&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0 HTTP/1.1 
Host: affiliate.iqbroker.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://deffield-funuals.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         45.60.156.148
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:06 GMT
content-length: 0
location: https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0&aff_model=
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
set-cookie: visid_incap_2683110=KILPCX6uTje24wYGaiI4dRlAwWIAAAAAQUIPAAAAAAAIBoO+bKkctukGiYZaXR1e; expires=Sun, 02 Jul 2023 22:35:15 GMT; HttpOnly; path=/; Domain=.iqbroker.com incap_ses_723_2683110=4+mCFFDmSTNMvvr4Z50IChlAwWIAAAAABTbojZBi2lSxS8Iu7wVaiA==; path=/; Domain=.iqbroker.com
x-cdn: Imperva
x-iinfo: 12-25969099-25969101 NNNN CT(24 59 0) RT(1656832025813 30) q(0 0 1 0) r(1 1) U5
X-Firefox-Spdy: h2

                                        
                                            GET /lp/forex-trading/static/video_screen.jpg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/jpeg
content-length: 41501
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Size:   41501
Md5:    e6f3493bcd3ba4d7e9e2120e15a85d45
Sha1:   bf3c618ef9fc8ab734f47d196e63b9ea78c4990b
Sha256: 5f6bd7b92b7f76814fc3984d2030e7e4097de171fa7b7460b95bff4164af2719
                                        
                                            GET /lp/forex-trading/static/review2.png HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/png
content-length: 5123
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Size:   5123
Md5:    5b55365551c501ab6778af0a29fc7220
Sha1:   e10aeda318f55d58b413d96ef87591645e823adf
Sha256: 7c3b42a448af454edcf6f2ab61c918043183a95459a8dc1d411dbef10a465139
                                        
                                            GET /lp/forex-trading/static/withdrawal_visa.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
content-length: 879
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/th/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (878)
Size:   879
Md5:    2369213734dc5a921850b345c4c2f625
Sha1:   1d5f14b4986fdddda4fb4b9d06fd9b53de8c147f
Sha256: e7dec4d8501c1eade84841a2171328096df17b55388044a80e26505b3c43866f
                                        
                                            GET /lp/forex-trading/static/withdrawal_maestro.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 1093
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2162)
Size:   1093
Md5:    30c5dd78d4d06e9d14cd9c6ca7e0ad79
Sha1:   c27f9b9a624d99e426123b7ec0713dc370cf6d91
Sha256: f4a6fbe6cc5511f02edf0d68aa5121d0677150ba3425beef409c4fa4f79b9fc3
                                        
                                            GET /lp/forex-trading/static/withdrawal_webmoney.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 1103
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2263)
Size:   1103
Md5:    d261056dc5c874ab70f702b03dff8670
Sha1:   0e48f041c8d1904531ea0ad01edcf8f3115d7b4a
Sha256: b7860c0e2c895b0303405e169ec106092af0e9d1d348e85faec207cf328c02d7
                                        
                                            GET /lp/forex-trading/static/withdrawal_neteller.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
content-length: 805
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (804)
Size:   805
Md5:    8e605b8de55e766d9c6d8e2ac54285e7
Sha1:   d4a11f2f73aaf292f13cb6c83925d99901919180
Sha256: d307118dce8c93702b37ad3c198e3419465885c0c529eabe1f6fb7a37805c8ac
                                        
                                            GET /lp/forex-trading/_next/static/qBKwNP3Cj9xk5VYRR5r8v/pages/_app.js HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 6248
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15033), with no line terminators
Size:   6248
Md5:    03e47920d3d06b7350ee5791d9a8e54b
Sha1:   9fa7175fcace4d340e3e92cefeb2352cd79ef07f
Sha256: 52d6ae626ccfefc56e4cee892430823b3adfccb150fbf2e222e218a677851e6c
                                        
                                            GET /lp/static/common/fonts/WorkSans/worksans_semibold.woff2 HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/octet-stream
content-length: 16608
last-modified: Tue, 21 Jun 2022 10:24:30 GMT
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16608, version 1.0\012- data
Size:   16608
Md5:    b43a5fcbd5ad006cf8a66c3d4bb1e756
Sha1:   d944bf7ad6a7c07a4ac15e30e2dc34aa68886220
Sha256: 5a3fdd33eef5a838c25b2afe031bc8478dd97dcd175ce9b9d99c2a77163b6748
                                        
                                            GET /lp/static/common/fonts/WorkSans/worksans_bold.woff2 HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/octet-stream
content-length: 16576
last-modified: Tue, 21 Jun 2022 10:24:30 GMT
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16576, version 1.0\012- data
Size:   16576
Md5:    2bbec02ba4bdd9cc9b88135e9f302a10
Sha1:   5ccfa9047b97de5a1ea9a2003e320b825b7475fe
Sha256: a25e14865126cb8fb6fba6ec8e05a94bf93b5f999bcc8785a80b54001d120eb5
                                        
                                            GET /lp/forex-trading/_next/static/images/icon_firefox-b0f8b2fa60edff7aaafb770787ac9c2c.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 4323
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (12313)
Size:   4323
Md5:    2f22c8e243d8d58cbddc50268fb67eb8
Sha1:   3f65d8fbb96c65e9c13aa79e07baac4e5042905f
Sha256: fbadf87c42ddc44e6d3f14f3ff53762aa2f678dd5c7713119918786648b05412
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /lp/forex-trading/_next/static/runtime/main-9f9cf067ba24aa0c3062.js HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 5238
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13340), with no line terminators
Size:   5238
Md5:    0093509b17e8693c8ab81849d1f8a6c4
Sha1:   f6d45f2912ed8cec663682d9529f48c3b1495ec8
Sha256: 3db16399d45ca818904c7532efa39ac4e1ed8308fcd5682794a86e7efde11cf4
                                        
                                            GET /lp/forex-trading/_next/static/runtime/webpack-e9ef7d1fc2501b770153.js HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 1202
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2342), with no line terminators
Size:   1202
Md5:    2e17c0956ecf158a2ef3d8c5bf0cc676
Sha1:   db7d30673b7517c4f043cfa2515f335f02580c51
Sha256: 197f10667ad3adbe76a4ecd8262995daa1a957bec0a70e072890e554219a7108
                                        
                                            GET /lp/forex-trading/static/item3_poster.jpg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/jpeg
content-length: 35485
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Size:   35485
Md5:    4f1158f0ab0d91c956216cecce232784
Sha1:   7a0616b53183c74ee082594d51ddf96f21064a9c
Sha256: d0712722861db01ab4c769ee3fa1d3a06c2eb9c20ebd14e86b1805e712886db3
                                        
                                            GET /lp/forex-trading/static/item1_video.webm HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 206 Partial Content
                                        
server: nginx
content-type: video/webm
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
content-range: bytes 0-486625/486626
content-length: 486626
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  WebM\012- EBML file, creator webmB\20\012- data
Size:   486626
Md5:    3d9e4b2f4d5bf38586db29bf3539f66a
Sha1:   cefe8c83119630442d70769291772b23cd058025
Sha256: 5ea54e503b131752cffc43b2458c24c1346f8952f714d68e585b3c4418ec6967
                                        
                                            GET /lp/forex-trading/static/withdrawal_visa_electron.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 1297
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2599)
Size:   1297
Md5:    d5dd1763c630c5cbe9bc7d64a428fc57
Sha1:   81e7085bce03fc37d336e42b72ba03553789e947
Sha256: 0d1b47e036d193e6e40ed02842bc983ac10f6233726cdd270f6cec77d13ac289
                                        
                                            GET /lp/forex-trading/static/withdrawal_mastercard.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 1111
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2471)
Size:   1111
Md5:    ad27fa106fd620c4c0372ef5524bdf9f
Sha1:   71558e36fc5feba9a12401beef65cb26e29775c2
Sha256: 7b00a5bbafba26feecdce911b9501cdb60498e1386feeba25efd976f8d29c914
                                        
                                            GET /lp/forex-trading/static/withdrawal_skrill.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 651
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1101)
Size:   651
Md5:    fab3a3afc438e6a3ef344f31a0926b36
Sha1:   533301716f9d68ca10f11d77420fe173934eaf6c
Sha256: 7fc138ef21574de9bc652e8dc0f3cad59bcb4f85416e01c255f8b0684287507b
                                        
                                            GET /lp/forex-trading/static/item2_video.webm HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 206 Partial Content
                                        
server: nginx
content-type: video/webm
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
content-range: bytes 0-647596/647597
content-length: 647597
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  WebM\012- EBML file, creator webmB\20\012- data
Size:   647597
Md5:    1b81f0a47a68878ca5483f22b7eafb91
Sha1:   8f46a39494ff12a80321f06c935708b57bf9aa92
Sha256: e571e377c67c95f135e3201abcf7d76286d0a9bcaac9c72db08401c00da9f14a
                                        
                                            GET /lp/forex-trading/static/review1.png HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/png
content-length: 4466
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Size:   4466
Md5:    f5688931f63a4d4d9c4deeb4c856c29e
Sha1:   00c3c6b833ecf0afe888afd23ed73ef03dd59148
Sha256: b65b4c179e82aedf35705ef6ba102ffdab1a53dfa29fd69251be0635f4040886
                                        
                                            GET /lp/forex-trading/_next/static/images/platform_desktop-105b0d5af86910fcb5259c1a6f826adf.svg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/svg+xml
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 37906
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   37906
Md5:    d58ab4ee2eb2139b8afdbccf78ae8fd9
Sha1:   1cdaf2992e9c2368a2d7166b5b2c302bf77e6424
Sha256: bc0625bc434367fe7c82f9b6a293505e691d11b5b81ab704c71d829f9a01efea
                                        
                                            GET /lp/forex-trading/static/item2_poster.jpg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/jpeg
content-length: 33028
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Size:   33028
Md5:    42281e9e887105c6d11381da78c5949c
Sha1:   28dcb685720812b00f56dbc9d06ba495772d77dd
Sha256: eb12a99a681a8eb03df78bbb401d174e564bf5a591ed79214f37db7cd7c8b6b2
                                        
                                            GET /lp/forex-trading/static/review3.png HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/png
content-length: 5233
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit colormap, non-interlaced\012- data
Size:   5233
Md5:    a1972f0409aa2c8d33a4076feac6fda6
Sha1:   adda20f875c49041a51e140ade59c386b55bae74
Sha256: 9fb3350ee66b2d575fa3f80bb1f9fee3374bad2faf9d98b07cf374f0189a0aaf
                                        
                                            GET /lp/forex-trading/static/bgr.jpg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/jpeg
content-length: 70367
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4364x2178, components 3\012- data
Size:   70367
Md5:    43690a9d27671d9e21e8576d2f8a8bce
Sha1:   dff80eee0e4c25c358d7a58584f057ba6c0db284
Sha256: 2c6a13e34a6d107fb9789da429450f3b820f1536e1558deac86a808ef15d3a61
                                        
                                            GET /gtm.js?id=GTM-WN69JL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
                                        
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Jul 2022 07:07:06 GMT
expires: Sun, 03 Jul 2022 07:07:06 GMT
cache-control: private, max-age=900
last-modified: Sun, 03 Jul 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (24447)
Size:   76519
Md5:    a2f9c93ca02e7c03afeec6587b643fd2
Sha1:   4a29ba22a2e958add01720e681767412eebd1a91
Sha256: 52c7682caf758804831913e3543f095b61cb364fc6fee1a434187cefd505b2f0
                                        
                                            GET /lp/forex-trading/_next/static/chunks/commons.263409280c3553cfc281.js HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
content-encoding: gzip
content-length: 99045
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Accept-Encoding
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   99045
Md5:    c4d62275ad6f327153d91fbc2d439b0e
Sha1:   e76c3b50e27b1514bef4c5cb73f8cb1906d93db9
Sha256: d6e6f9df494ce1baf121b68b6d12c536fbc37712daefa1a8b4e8e78dd8bf7a6a
                                        
                                            GET /lp/forex-trading/static/item1_poster.jpg HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/jpeg
content-length: 36702
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x840, components 3\012- data
Size:   36702
Md5:    4b883b4c13e7e8f281d73a726de2b7ad
Sha1:   36a5e8f06d76322df612172ac0c81e19ad2ef2df
Sha256: 035d2b69ada23bc1a9a34d657cc76d0b0a926b9f548fee25179d24c0a73555f5
                                        
                                            GET /lp/forex-trading/static/item3_video.webm HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 206 Partial Content
                                        
server: nginx
content-type: video/webm
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
content-range: bytes 0-1000809/1000810
content-length: 1000810
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  WebM\012- EBML file, creator webmB\20\012- data
Size:   1000810
Md5:    87b388d756dd5c1c17f6e0b763095f79
Sha1:   1d1ff76228a7a9745fa9cbd73a7d213575658687
Sha256: 7ba6e80cda5ee27fb97f4409e858cf0c580dc643d0bd21ce7c15f1dc0162d73a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638"
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Sun, 03 Jul 2022 08:18:46 GMT
Date: Sun, 03 Jul 2022 07:07:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638"
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Sun, 03 Jul 2022 08:18:46 GMT
Date: Sun, 03 Jul 2022 07:07:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638"
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Sun, 03 Jul 2022 08:18:46 GMT
Date: Sun, 03 Jul 2022 07:07:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638"
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Sun, 03 Jul 2022 08:18:46 GMT
Date: Sun, 03 Jul 2022 07:07:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638"
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4300
Expires: Sun, 03 Jul 2022 08:18:46 GMT
Date: Sun, 03 Jul 2022 07:07:06 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ea1212f-c856-478b-8478-e81dd7306820.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10143
x-amzn-requestid: 7b198982-763e-427b-9abb-2d533f346821
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UaZt7HBnIAMFtOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ba6ff2-30284cbe4fa5a0906070335e;Sampled=0
x-amzn-remapped-date: Tue, 28 Jun 2022 03:05:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lTKF2-OdgSohMRk07yAFIDTy8eaebXdLG3Yjwp1h6tEuWANw9ZmYHg==
via: 1.1 f94de31c777bc3bf7b8976bac21b4482.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 02 Jul 2022 13:49:14 GMT
age: 62272
etag: "e64381fdfedbede9788ae6b82affd78ceaf56284"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10143
Md5:    eebebd88b9e7ba3d94e19e6a20be4fd5
Sha1:   e64381fdfedbede9788ae6b82affd78ceaf56284
Sha256: 9a7950214124312b6f80394ea72d0f29773d11f223173c1343c9669e3723247b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0972b268-f4d1-450c-a4fb-9c028283bc9a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10919
x-amzn-requestid: 23b6304d-6914-4b7c-9546-51a0cc618047
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Udsy_HypoAMFjpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bbc1ac-3609a3fa574884a612eb1430;Sampled=0
x-amzn-remapped-date: Wed, 29 Jun 2022 03:06:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NYiOOnweelCp0-DKbA2Z_bItDA3jpetk97Engp4BpzxahJsDdkP3HA==
via: 1.1 11c8673f8a48dc627eaa83c99e9efedc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sat, 02 Jul 2022 23:18:23 GMT
age: 28123
etag: "ca5bbf12904de3b5b04917d7acec94313b09fb87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10919
Md5:    b7bb856907b42548036082ab66b18020
Sha1:   ca5bbf12904de3b5b04917d7acec94313b09fb87
Sha256: 00f04c1600388f435b3100709ebbd3c36e2f4d50d65fa6126d477f769cfb3f10
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F27c91804-20e6-462f-aedb-bdf209d6a7ff.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7435
x-amzn-requestid: b40cee49-550f-4039-97ef-1b46de576522
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UqJBtE5voAMFWCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c0bba4-63212eaf06fb7d291ff9e6da;Sampled=0
x-amzn-remapped-date: Sat, 02 Jul 2022 21:41:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2471PJrEUC3dKtVzv8vDMiY53Zt7tLMbYHGk6cNyWmN9eL42S7VYQA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 02 Jul 2022 22:03:00 GMT
age: 32646
etag: "9b4f9ba34e26b13aef71dd9125dd3878dc2f9105"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7435
Md5:    bff84dbfeb7d2cb2edcb367e84ed0f7e
Sha1:   9b4f9ba34e26b13aef71dd9125dd3878dc2f9105
Sha256: 0a760e8b512c0b81c732721e1e0fae54b14b8387aa0d214ce7f325ba128d7a05
                                        
                                            GET /lp/static/common/fonts/WorkSans/worksans_regular.woff2 HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: application/octet-stream
content-length: 15112
last-modified: Tue, 21 Jun 2022 10:24:30 GMT
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
vary: Origin
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: Overwrite, Destination, Content-Type, Depth, User-Agent, Translate, Range, Content-Range, Timeout, X-File-Size, X-Requested-With, If-Modified-Since, If-None-Match, X-File-Name, Cache-Control, Location, Lock-Token, Chrome-Proxy
access-control-allow-methods: ACL, CANCELUPLOAD, CHECKIN, CHECKOUT, COPY, DELETE, GET, HEAD, LOCK, MKCALENDAR, MKCOL, MOVE, OPTIONS, POST, PROPFIND, PROPPATCH, PUT, REPORT, SEARCH, UNCHECKOUT, UNLOCK, UPDATE, VERSION-CONTROL
access-control-allow-origin: https://iqbroker.com
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8553
Md5:    e6f97e6b64100081e8bed56216564854
Sha1:   303f4efaa9b98e39a935fc6514d3731d40d2977c
Sha256: 92dd803f1633bd65a2b4ac3223d8aa93dd55ed64c74b338aff62323585a3623c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c97a45-9072-4fac-84b3-a7c1dccc7ed9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7820
x-amzn-requestid: 33d023ab-1554-4f91-8c7a-c46a79f5947d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UeP9QGFFIAMFn2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62bbf9ee-5466f7b04561e6ab548ec9a0;Sampled=0
x-amzn-remapped-date: Wed, 29 Jun 2022 07:06:22 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lhu_eNW3Gfn5barDmihnAzUGa68RSyLg3tdA-YK0_5lkjO5dMyi57A==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 02 Jul 2022 14:33:48 GMT
age: 59598
etag: "228ea63d5d888e3b60c5da9d87c558bb4d269028"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7820
Md5:    27d70fd408502fae2c7f4bc35d3399b0
Sha1:   228ea63d5d888e3b60c5da9d87c558bb4d269028
Sha256: 13e88146f01a851d089f8b2519f637a106e12d29f6a9d2cb6d3f27cbfd3dc274
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3e7def4-fa03-41c4-8f87-ca1c8e0a4d7d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10793
x-amzn-requestid: af8e6514-8443-4c8f-9f65-88a6025913e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UXqEYHTrIAMFUYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b956e8-18404d4544198087193d15f7;Sampled=0
x-amzn-remapped-date: Mon, 27 Jun 2022 07:06:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4uubd20jAIZFr9GHZajdl9Gj2SOTJioHr-zSMF_9BlPdV0WWPnkZKQ==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 03 Jul 2022 06:36:01 GMT
age: 1865
etag: "f436c3dfd37e001f9435b423fd231d16f5f755da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10793
Md5:    ac975bec09c46e865142774a9b3ad88d
Sha1:   f436c3dfd37e001f9435b423fd231d16f5f755da
Sha256: 122eaf24f973fbdddb671b0085101505d0467992389b14a18706c067130fd7be
                                        
                                            GET /lp/forex-trading/_next/static/images/favicon-16x16-35eb524c3ef37951f7c6725f2faf9ac1.png HTTP/1.1 
Host: static.cdnroute.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         23.36.76.88
HTTP/2 200 OK
                                        
server: nginx
content-type: image/png
content-length: 429
last-modified: Tue, 21 Jun 2022 10:23:36 GMT
access-control-allow-origin: *
link: <https://iqoption.com/lp/forex-trading/en/>; rel="canonical"
backend: arbitre_v4
accept-ranges: bytes
date: Sun, 03 Jul 2022 07:07:06 GMT
set-cookie: IsAppStoreCountry=true; expires=Wed, 03 Aug 2022 07:07:06 GMT; domain=.iqoption.com; path=/; secure; SameSite=None connection_track=8e37572fdba33af9bb5e339420bff2c3
x-provider-name: Akamai
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   429
Md5:    35eb524c3ef37951f7c6725f2faf9ac1
Sha1:   b97ac7225ab30a831998b29556e8a3361d44a9a1
Sha256: 543c6de6d1378fef8237ba0eae724a8823a6d7542276462c2efbc8ba25760f6c
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: eu.iqoption.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.138
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=b6c5adcad0e75f2a0e090764bbc0cca8
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BCAA664ABC762F9165AA8B6A20CD318A4D25CC7884E243BC674058354DA598BB"
Last-Modified: Fri, 01 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1975
Expires: Sun, 03 Jul 2022 07:40:02 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "708708F91F9662315C7EF528193FBC8FD2D696B88CDB502F1FC626CDC6857E60"
Last-Modified: Sun, 03 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13391
Expires: Sun, 03 Jul 2022 10:50:18 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A7CC44C3D5AF13044764C07CC64BDF9AC3884CDE897DF2DD108C7CF0DD35A7D5"
Last-Modified: Sat, 02 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6398
Expires: Sun, 03 Jul 2022 08:53:45 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Connection: keep-alive

                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqbroker.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.138
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5468
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:07 GMT
Last-Modified: Sun, 03 Jul 2022 05:35:59 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4262BD5730B3B3EDB2B09365A2798B101517A5D0A26BC5A1467FCD107CE4AFE7"
Last-Modified: Fri, 01 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6233
Expires: Sun, 03 Jul 2022 08:51:00 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Connection: keep-alive

                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iq-options.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B8CED651B849C67EC2596BFDF79B57514BDBC7ED9C38C2E1F0DB6DEE0273A3E4"
Last-Modified: Fri, 01 Jul 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6500
Expires: Sun, 03 Jul 2022 08:55:27 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Connection: keep-alive

                                        
                                            GET /hit?aff_id=1055&aff_model=&aff_track=ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0&brand_id=1&rand=0.5125639097221051&referrer=https%3A%2F%2Fdeffield-funuals.com%2F&u=37eee2119333ce650184d6b02b409ec7 HTTP/1.1 
Host: tracker.affiliate.iqbroker.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Cookie: visid_incap_2683110=KILPCX6uTje24wYGaiI4dRlAwWIAAAAAQUIPAAAAAAAIBoO+bKkctukGiYZaXR1e; incap_ses_723_2683110=4+mCFFDmSTNMvvr4Z50IChlAwWIAAAAABTbojZBi2lSxS8Iu7wVaiA==; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; landing=/lp/forex-trading/; aff=1055; retrack=; affextra=; afftrack=ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0; aff_model=; aff_ts=2022-07-03T07:07:06Z; AffTrackGroup=Black_team_(partnerka); Serv=NL; referrer=https://deffield-funuals.com/; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true; RedirectDomain=iqoption.com; linkPolicy=/en/terms-and-conditions/privacy-policy-new; linkTerms=/en/terms-and-conditions/terms-conditions; RedirectDomains=iqoption.com,iqtrading.asia; aff_params={"landing_url":"https://iqbroker.com/lp/forex-trading/"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: application/json
content-length: 15
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
access-control-allow-origin: https://iqbroker.com
set-cookie: tsd=8d784f2d-099e-4c1b-b1fe-953d277ad3c0; Expires=Mon, 04 Jul 2022 07:07:07 GMT; HttpOnly; Secure; SameSite=None country_code=NO
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   15
Md5:    28ec1eee5f4049e3c4f2135069c1d2c8
Sha1:   3505519507ca1c2a089c46e100b80408ca278421
Sha256: edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqoptions.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqoption.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=ac7d15c3aa76a626b0d65ebd951422ca
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqoption.co.th
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqoption.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=8e9985030fd51485763b8d7c09573255
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 450
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:07 GMT
Last-Modified: Sun, 03 Jul 2022 06:59:38 GMT
Server: ECS (amb/6B92)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4162
Cache-Control: max-age=106369
Date: Sun, 03 Jul 2022 07:07:07 GMT
Etag: "62c02c5a-1d7"
Expires: Mon, 04 Jul 2022 12:39:56 GMT
Last-Modified: Sat, 02 Jul 2022 11:30:34 GMT
Server: ECS (amb/6BBE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: banking.trading
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iq-option.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: broker-iqoption.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Origin: https://iqbroker.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /?st=pba& HTTP/1.1 
Host: websdk.appsflyer.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.36.76.88
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
x-amz-id-2: 4haMOXDItrc8YAsvjP5Y/gbfdGolA2yEsUPI+FqwDDhYzG2L2zfJACl/etuphYJSQMXfI7TXm8g=
x-amz-request-id: MKFRWNGA75DSVKN5
Last-Modified: Wed, 27 Apr 2022 08:41:43 GMT
ETag: "cc82ca2a69eac2386ea395ea1e0ad0f6"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2935
Expires: Sun, 03 Jul 2022 07:56:02 GMT
Date: Sun, 03 Jul 2022 07:07:07 GMT
Content-Length: 9575
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (21856)
Size:   9575
Md5:    2902a2c87591f52fe75ec67763d36598
Sha1:   f95fdcd612b076f2deccc29c4674a80f1db9cad6
Sha256: 3f9873dc0fcde232799bfaea802351433c9934862bb296e993c442cf0fbfcd6f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4027
Cache-Control: max-age=96622
Date: Sun, 03 Jul 2022 07:07:07 GMT
Etag: "62c006ce-1d7"
Expires: Mon, 04 Jul 2022 09:57:29 GMT
Last-Modified: Sat, 02 Jul 2022 08:50:22 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 03 Jul 2022 06:41:12 GMT
expires: Sun, 03 Jul 2022 08:41:12 GMT
cache-control: public, max-age=7200
age: 1555
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            GET /mgsensor.js?d=1656832027326 HTTP/1.1 
Host: a.mgid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.19.134.78
HTTP/2 200 OK
                                        
date: Sun, 03 Jul 2022 07:07:07 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: c212c8f7-0e4d-4470-8162-0330558e7e72
cf-cache-status: DYNAMIC
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
set-cookie: __cf_bm=XxYCzLQTArKQRy94p0VHG0pwt0ki_bMm7f.O74FZr98-1656832027-0-AaJTALASJBkaaIgFhMnfBZt00pZb7JpLDPqRuDZYtyMahs3LTYMI3KUl3XoHBjK2BamDapyQir0kKquDpnyW6kk=; path=/; expires=Sun, 03-Jul-22 07:37:07 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 724dc84a09c3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15899), with no line terminators
Size:   31032
Md5:    19c31d8b025005b2b09c60f9675e984d
Sha1:   7d5d23eef7bd9222187d5447741af5e49bd7d208
Sha256: c25c80a901c344d3cdbe642586308ef6b316a4495b7d123f8566a26f9e35b8d7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4270
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:07 GMT
Last-Modified: Sun, 03 Jul 2022 05:55:57 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:07 GMT
Content-Length: 939
Connection: keep-alive
Expires: Thu, 07 Jul 2022 03:45:35 GMT
ETag: "4a7fa1ac04a6e37536346dbf634785c744a5062d"
Last-Modified: Sun, 03 Jul 2022 03:45:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1404
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 724dc84bdcb81c06-OSL

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-44367767-1&cid=1717700626.1656832028&jid=532102639&gjid=757469533&_gid=1597151833.1656832028&_u=YCDAiEABBAAAAE~&z=1728876873 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         173.194.222.155
HTTP/2 200 OK
                                        
access-control-allow-origin: https://iqbroker.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 03 Jul 2022 07:07:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /metrika/tag.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         93.158.134.119
HTTP/2 200 OK
                                        
content-length: 71607
date: Sun, 03 Jul 2022 07:07:07 GMT
access-control-allow-origin: *
etag: "62b5603e-117b7"
expires: Sun, 03 Jul 2022 08:07:07 GMT
last-modified: Fri, 24 Jun 2022 09:57:02 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (724)
Size:   71607
Md5:    534b56bf49fcf92bffc57bb6f997d1c5
Sha1:   85eaa34230a87cdcb85f00e47ed4603ec49dd1f8
Sha256: 3b13894cc1ec86e8f83fd5f5cfdd6dc2fee79cfe54fafbc57b2bf5705e6d02cf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
                                        
content-length: 43
date: Sun, 03 Jul 2022 07:07:08 GMT
access-control-allow-origin: *
etag: "62b5603e-2b"
expires: Sun, 03 Jul 2022 08:07:08 GMT
accept-ranges: bytes
last-modified: Fri, 24 Jun 2022 09:57:02 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.107.21.200
HTTP/2 200 OK
                                        
cache-control: private,max-age=1800
content-length: 11360
content-type: application/javascript
content-encoding: gzip
last-modified: Thu, 16 Jun 2022 18:22:08 GMT
accept-ranges: bytes
etag: "0c8eafcad81d81:0"
vary: Accept-Encoding
set-cookie: MUID=1921F4135971661C333CE5C558266708; domain=.bing.com; expires=Fri, 28-Jul-2023 07:07:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A471E3B2354F4C0182FFFE4F5FCEA32A Ref B: OSL30EDGE0408 Ref C: 2022-07-03T07:07:08Z
date: Sun, 03 Jul 2022 07:07:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (38764), with no line terminators
Size:   11360
Md5:    89d0cd4aaf03163b7c66bd3ffbcfc757
Sha1:   5301fad6e9295c8cf0814aefc0fdea2e476a78bb
Sha256: c7077624ec66193ab1560dc670643bf6e17f89b27773640915a1a576af84a55f
                                        
                                            POST /g/collect?v=2&tid=G-BH1SENMS6L&gtm=2oe6t0&_p=749927614&_z=ccd.v9B&cid=1717700626.1656832028&ul=en-us&sr=1280x1024&_s=1&sid=1656832027&sct=1&seg=0&dl=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dws1bvku2r3olonahiamfpte0%26clickid%3Dws1bvku2r3olonahiamfpte0%26aff_model%3D&dr=https%3A%2F%2Fdeffield-funuals.com%2F&dt=A%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&en=page_view&_fv=1&_nsi=1&_ss=2 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
                                        
access-control-allow-origin: https://iqbroker.com
date: Sun, 03 Jul 2022 07:07:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /watch/22669009/1?wmode=7&page-url=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dws1bvku2r3olonahiamfpte0%26clickid%3Dws1bvku2r3olonahiamfpte0%26aff_model%3D&page-ref=https%3A%2F%2Fdeffield-funuals.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A30shymy9gde47aiv43iew%3Afp%3A538%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A832%3Acn%3A1%3Adp%3A0%3Als%3A94647374953%3Ahid%3A19228279%3Az%3A0%3Ai%3A20220703070708%3Aet%3A1656832028%3Ac%3A1%3Arn%3A439709090%3Arqn%3A1%3Au%3A1656832028372538494%3Aw%3A1268x1024%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1656832026022%3Ads%3A1%2C62%2C27%2C0%2C319%2C0%2C%2C122%2C1%2C%2C%2C%2C540%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1656832028%3At%3AA%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Referer: https://iqbroker.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         93.158.134.119
HTTP/2 200 OK
                                        
content-length: 1026
date: Sun, 03 Jul 2022 07:07:08 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://iqbroker.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 03-Jul-2022 07:07:08 GMT
last-modified: Sun, 03-Jul-2022 07:07:08 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (1026), with no line terminators
Size:   1026
Md5:    666097f88ce09fff0f9aae3da4961347
Sha1:   ab18ba8953a9c17be9ae068549de25befb56ed75
Sha256: 869bab457210bd57ef7174d477debf77051cb1b76228c41e6c828cbe77fe326d
                                        
                                            GET /action/0?ti=5089525&tm=gtm002&Ver=2&mid=771b8486-83a3-410b-99f1-c30b3ba827ef&sid=c08d2110fa9e11ecbb3ceda321c4b82a&vid=c08d2290fa9e11eca0b651674210f148&vids=1&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=A%20classic%20Reimagined.%20Forex%20by%20IQ%20Option.&p=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dws1bvku2r3olonahiamfpte0%26clickid%3Dws1bvku2r3olonahiamfpte0%26aff_model%3D&r=https%3A%2F%2Fdeffield-funuals.com%2F&lt=541&evt=pageLoad&msclkid=N&sv=1&rn=958541 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0CC3B539CC4363663C03A4EFCD1462A3; domain=.bing.com; expires=Fri, 28-Jul-2023 07:07:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 12311817E9AF4FA9AAADFDD571110B84 Ref B: OSL30EDGE0408 Ref C: 2022-07-03T07:07:08Z
date: Sun, 03 Jul 2022 07:07:07 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /p/action/5089525.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 200 OK
                                        
cache-control: private,max-age=60
content-length: 299
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=24F82E11AEC363653D403FC7AF9462C0; domain=.bing.com; expires=Fri, 28-Jul-2023 07:07:08 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 47BCE9F8A2994F32B500B3E4A38B806B Ref B: OSL30EDGE0408 Ref C: 2022-07-03T07:07:08Z
date: Sun, 03 Jul 2022 07:07:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   299
Md5:    0e11bfdc4c14b3302497c4a0681cd785
Sha1:   f09378f64b12a51dbb85c15ad53ccf19e9e17258
Sha256: 800a711afe522a905065ae4095a83f46e18f8c7eca449025c57d4e6d5f006aa3
                                        
                                            GET /tr/?id=268776370499332&ev=PageView&dl=https%3A%2F%2Fiqbroker.com%2Flp%2Fforex-trading%2F%3Faff%3D1055%26afftrack%3Dws1bvku2r3olonahiamfpte0%26clickid%3Dws1bvku2r3olonahiamfpte0%26aff_model%3D&rl=https%3A%2F%2Fdeffield-funuals.com%2F&if=false&ts=1656832028672&sw=1280&sh=1024&v=2.9.64&r=stable&ec=0&o=28&fbp=fb.1.1656832028671.171564732&it=1656832027752&coo=false&exp=p0&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.240.35
HTTP/2 200 OK
                                        
content-type: image/gif
date: Sun, 03 Jul 2022 07:07:08 GMT
expires: Sun, 03 Jul 2022 07:07:08 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    b798f4ce7359fd815df4bdf76503b295
Sha1:   f8cc6addf1707ad236ad9970b0a48f9733d07da5
Sha256: 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:08 GMT
Ali-Swift-Global-Savetime: 1656832028
Via: cache1.l2de2[183,182,200-0,M], cache1.l2de2[184,0], cache4.se1[265,265,200-0,M], cache4.se1[267,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 03 Jul 2022 07:07:08 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816568320284432654e


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   9055
Md5:    9ba60e3946721959cb3f85855b0a8bab
Sha1:   aec407e9166bfcd4a38d460bf0c6efda8b02490f
Sha256: ea72e9fc9006f18fc67a0be8cf33695efb37fcb4d11d88a48a81cfc9808d845f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         47.246.44.205
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Tengine
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:08 GMT
Ali-Swift-Global-Savetime: 1656832028
Via: cache6.l2de2[462,461,200-0,M], cache6.l2de2[463,0], cache4.se1[546,546,200-0,M], cache4.se1[547,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Sun, 03 Jul 2022 07:07:08 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816568320282252498e

                                        
                                            GET /tag/uet/5089525 HTTP/1.1 
Host: www.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         40.90.65.7
HTTP/2 200 OK
                                        
cache-control: no-cache, no-store
content-length: 1539
content-type: application/x-javascript
expires: -1
set-cookie: CLID=08e6cef4097546c9a147c6452a9d3592.20220703.20230703; expires=Mon, 03 Jul 2023 07:07:08 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:593e4080-f032-4d00-a652-e17f01252a9d
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0HEDBYgAAAAAaYMbY2ivFQrWahwB4/+OCSEVMMDFFREdFMjEwOAA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sun, 03 Jul 2022 07:07:08 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1539), with no line terminators
Size:   1539
Md5:    8ef36da9af304c2fc130d8512b06695e
Sha1:   eaf16bf297851a209b198f512dbe82bc96b2b2d0
Sha256: 5573374f0bd690152fd34e59068dd5de0c8e56617e737f934626e16a92cd86a5
                                        
                                            GET /ads/SG_iqoption_@S.js HTTP/1.1 
Host: api.popin.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         119.63.193.220
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Sun, 03 Jul 2022 07:07:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 14 Sep 2020 08:33:58 GMT
ETag: W/"4511453817dd21621eb260e855ead80c"
Cache-Control: max-age=3600
x-amz-version-id: null
Expires: Sun, 03 Jul 2022 08:07:08 GMT
Cross-Origin-Resource-Policy: cross-origin
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (964)
Size:   602
Md5:    f0f2d7ae86eb34ff1c009e24a7d5c0c0
Sha1:   513c07402321ed14267010584a46904e8b57ad98
Sha256: a7248391a34b0adf1405d10c07a499a357c1506f544b992b17c3326c276d2fe3
                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 831
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://iqbroker.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 03 Jul 2022 07:07:09 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /popin_discovery5-min.js HTTP/1.1 
Host: api.popin.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         119.63.193.220
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 03 Jul 2022 07:07:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 26 May 2022 05:04:08 GMT
ETag: W/"455b85d8c8e61303fd231d2415058c18"
x-amz-version-id: 7goFykhV809rshrE2QHSfol2kmepeVDO
Expires: Sun, 03 Jul 2022 08:07:09 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65212), with no line terminators
Size:   42971
Md5:    f94e3fd4669f38a60fd369dedc775339
Sha1:   048ca3872ddec115d997e8d4db32af1e906773db
Sha256: 501c58c28296a38d604e197906777bbda3d5aa01a169c441ecf6903b232f2773
                                        
                                            GET /td_js_sdk_171.js HTTP/1.1 
Host: api.popin.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         119.63.193.220
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Sun, 03 Jul 2022 07:07:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2018 09:42:51 GMT
ETag: W/"17b2e8b253e693d224f7d8407e28e1ea"
Cache-Control: max-age=3600
x-amz-version-id: null
Expires: Sun, 03 Jul 2022 08:07:10 GMT
Cross-Origin-Resource-Policy: cross-origin
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (15820)
Size:   12707
Md5:    f8c04fbcd2a9a8decb5575efb7579613
Sha1:   25b9b4daa00ce4f2393123574211b07dfdf666d2
Sha256: ca3918c559732ff63c526b8a42b4033c38a6001894d315775fe70db6d0851038
                                        
                                            GET /iframe/piuid.html?ac=piuid&t=15009898 HTTP/1.1 
Host: api.popin.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         119.63.193.220
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 03 Jul 2022 07:07:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 21 Nov 2019 09:08:45 GMT
ETag: W/"43676b9118e1fa3ce36d31e318eb36e9"
x-amz-version-id: null
Expires: Sun, 03 Jul 2022 08:07:10 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
X-Cache-Status: HIT from 10.252.55.25
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1601)
Size:   1888
Md5:    40a32cdbd8f4d6fdcacd1d1743a847bc
Sha1:   4372622b955d04d0c50b836f73f0fc08e80b1323
Sha256: 30481476bbe8627eb7363609e58b15caaf88ef4d416b1df485dec44c55bb6f9c
                                        
                                            GET /test/popin_send_cookie_set_fail.js?20201223 HTTP/1.1 
Host: api.popin.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         119.63.193.220
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 03 Jul 2022 07:07:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 11 Oct 2021 03:29:29 GMT
ETag: W/"27aab2e5fb58e044704790074416e410"
x-amz-version-id: NVPBtcLlaQ0R5YVGUD48RBS0d2V00MrK
Expires: Sun, 03 Jul 2022 08:07:10 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1877)
Size:   4060
Md5:    fc15eab2a6dfd4958c93a6ab0d7f06ed
Sha1:   e098ee5395424b62ca0200de08594cb1da222ff1
Sha256: 8efeb44ee0ab4ced4f4926a7e388d1ccf0b641d9bdeb251dc21cb51286a953e6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2715
Cache-Control: 'max-age=158059'
Date: Sun, 03 Jul 2022 07:07:10 GMT
Etag: "62c07416-1d7"
Last-Modified: Sun, 03 Jul 2022 06:21:55 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /c.gif HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         20.234.93.27
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=0AF6E48896BA41BA859A09A1E37C9BEB&RedC=c.clarity.ms&MXFR=04D3942013606D83058985F6176063C1
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure; MUID=04D3942013606D83058985F6176063C1; domain=.clarity.ms; expires=Fri, 28-Jul-2023 07:07:10 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sun, 03 Jul 2022 07:07:09 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /lp/api/cookies HTTP/1.1 
Host: iqtrading.asia
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         185.117.134.136
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:10 GMT
content-type: text/plain; charset=utf-8
content-length: 108
access-control-allow-credentials: true
access-control-allow-origin: https://iqbroker.com
backend: arbitre_v4_api
set-cookie: connection_track=046da2d8576503a6d45578f793354ad3
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   108
Md5:    b82324f523a57740738b801d7803a5c4
Sha1:   27ac403588140544b12e630a7f264eaa5058fc82
Sha256: 216cd6620b4e2e1247222fb537a047b2479f3f848ae141ede93711fa7baebbab
                                        
                                            GET /c.gif?CtsSyncId=0AF6E48896BA41BA859A09A1E37C9BEB&RedC=c.clarity.ms&MXFR=04D3942013606D83058985F6176063C1 HTTP/1.1 
Host: c.bing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         13.107.21.200
HTTP/2 302 Found
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=0AF6E48896BA41BA859A09A1E37C9BEB&MUID=2D452AA860A067A30A433B7E61F76618
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=2D452AA860A067A30A433B7E61F76618; domain=c.bing.com; expires=Fri, 28-Jul-2023 07:07:10 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 7BF76A835E304C188D2410B304C24A78 Ref B: OSL30EDGE0408 Ref C: 2022-07-03T07:07:10Z
date: Sun, 03 Jul 2022 07:07:09 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST /lp/api/redirect-error HTTP/1.1 
Host: iqbroker.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 84
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0&aff_model=
Cookie: visid_incap_2683110=KILPCX6uTje24wYGaiI4dRlAwWIAAAAAQUIPAAAAAAAIBoO+bKkctukGiYZaXR1e; incap_ses_723_2683110=4+mCFFDmSTNMvvr4Z50IChlAwWIAAAAABTbojZBi2lSxS8Iu7wVaiA==; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; landing=/lp/forex-trading/; aff=1055; retrack=; affextra=; afftrack=ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0; aff_model=; aff_ts=2022-07-03T07:07:06Z; AffTrackGroup=Black_team_(partnerka); Serv=NL; referrer=https://deffield-funuals.com/; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true; RedirectDomain=iqoption.com; linkPolicy=/en/terms-and-conditions/privacy-policy-new; linkTerms=/en/terms-and-conditions/terms-conditions; RedirectDomains=iqoption.com,iqtrading.asia; aff_params={"landing_url":"https://iqbroker.com/lp/forex-trading/"}; _gcl_au=1.1.428009594.1656832027; _ga_BH1SENMS6L=GS1.1.1656832027.1.1.1656832027.0; _ga=GA1.2.1717700626.1656832028; _gid=GA1.2.1597151833.1656832028; _dc_gtm_UA-44367767-1=1; MgidSensorNVis=1; MgidSensorHref=https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0&aff_model=; _ym_uid=1656832028372538494; _ym_d=1656832028; _ym_isad=2; _uetsid=c08d2110fa9e11ecbb3ceda321c4b82a; _uetvid=c08d2290fa9e11eca0b651674210f148; _fbp=fb.1.1656832028671.171564732; _clck=6hj6jm|1|f2u|0; _clsk=m6t796|1656832030867|1|0|b.clarity.ms/collect; _ym_visorc=b; aff_history=[{"aff":"1055","afftrack":"ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0","aff_model":"","date":1656832026000,"landing":"/lp/forex-trading/"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         185.117.134.138
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:10 GMT
content-type: application/json
content-length: 0
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /lp/api/redirect-error HTTP/1.1 
Host: iqbroker.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 86
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0&aff_model=
Cookie: visid_incap_2683110=KILPCX6uTje24wYGaiI4dRlAwWIAAAAAQUIPAAAAAAAIBoO+bKkctukGiYZaXR1e; incap_ses_723_2683110=4+mCFFDmSTNMvvr4Z50IChlAwWIAAAAABTbojZBi2lSxS8Iu7wVaiA==; IsRestrictedCountry=false; IsRegulatedCountry=true; Country=no; CountryID=149; landing=/lp/forex-trading/; aff=1055; retrack=; affextra=; afftrack=ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0; aff_model=; aff_ts=2022-07-03T07:07:06Z; AffTrackGroup=Black_team_(partnerka); Serv=NL; referrer=https://deffield-funuals.com/; AppID=id871125783; brand_id=1; platform=9; client_platform_id=9; support_email=support@eu.iqoption.com; company_id=1; IsAppStoreCountry=true; RedirectDomain=iqoption.com; linkPolicy=/en/terms-and-conditions/privacy-policy-new; linkTerms=/en/terms-and-conditions/terms-conditions; RedirectDomains=iqoption.com,iqtrading.asia; aff_params={"landing_url":"https://iqbroker.com/lp/forex-trading/"}; _gcl_au=1.1.428009594.1656832027; _ga_BH1SENMS6L=GS1.1.1656832027.1.1.1656832027.0; _ga=GA1.2.1717700626.1656832028; _gid=GA1.2.1597151833.1656832028; _dc_gtm_UA-44367767-1=1; MgidSensorNVis=1; MgidSensorHref=https://iqbroker.com/lp/forex-trading/?aff=1055&afftrack=ws1bvku2r3olonahiamfpte0&clickid=ws1bvku2r3olonahiamfpte0&aff_model=; _ym_uid=1656832028372538494; _ym_d=1656832028; _ym_isad=2; _uetsid=c08d2110fa9e11ecbb3ceda321c4b82a; _uetvid=c08d2290fa9e11eca0b651674210f148; _fbp=fb.1.1656832028671.171564732; _clck=6hj6jm|1|f2u|0; _clsk=m6t796|1656832030867|1|0|b.clarity.ms/collect; _ym_visorc=b; aff_history=[{"aff":"1055","afftrack":"ws1bvku2r3olonahiamfpte0__clickid-ws1bvku2r3olonahiamfpte0","aff_model":"","date":1656832026000,"landing":"/lp/forex-trading/"}]
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         185.117.134.138
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 03 Jul 2022 07:07:10 GMT
content-type: application/json
content-length: 0
backend: arbitre_v4_api
strict-transport-security: max-age=15555600
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /c.gif?CtsSyncId=0AF6E48896BA41BA859A09A1E37C9BEB&MUID=2D452AA860A067A30A433B7E61F76618 HTTP/1.1 
Host: c.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://iqbroker.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.234.93.27
HTTP/2 200 OK
                                        
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Sat, 02 Jul 2022 00:08:47 GMT
accept-ranges: bytes
etag: "8a177e6a78dd81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sun, 03-Jul-2022 07:17:10 GMT; path=/; SameSite=None; Secure;
date: Sun, 03 Jul 2022 07:07:09 GMT
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    32023bb33cfb2a1990a4ef2d85b6ac16
Sha1:   23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
Sha256: 99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-44367767-1&cid=1717700626.1656832028&jid=532102639&_u=YCDAiEABBAAAAE~&z=1367180132 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Jul 2022 07:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-44367767-1&cid=1717700626.1656832028&jid=532102639&_u=YCDAiEABBAAAAE~&z=1367180132 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.3
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 03 Jul 2022 07:07:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 03 Jul 2022 07:07:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /collect HTTP/1.1 
Host: b.clarity.ms
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 898
Origin: https://iqbroker.com
Connection: keep-alive
Referer: https://iqbroker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         20.75.32.255
HTTP/2 204 No Content
                                        
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: https://iqbroker.com
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sun, 03 Jul 2022 07:07:11 GMT
X-Firefox-Spdy: h2